Cybersecurity Professional

Job Title: Cybersecurity Professional

Job Location: Anywhere in India

Role Overview

As a Product and Solution Security Expert (PSSE) in Grid Software, you are the cybersecurity backbone for mission-critical Operational Technology (OT) deployments. You will act as the trusted security authority interfacing between our R&D organizations, project engineering teams, and major transmission/distribution system operators (TSOs/DSOs).

Your mission is to secure our advanced SCADA, ADMS, and grid automation solutions against evolving threat landscapes without compromising the strict availability and real-time performance demands of critical infrastructure. You will champion our security posture—safeguarding legacy integration layers while driving robust, secure architectures for modern deployments.

Key Responsibilities

Customer & Stakeholder Cybersecurity Leadership: Serve as the primary security interface for high-stakes customer projects, leading security alignment workshops, architecture reviews, and defending our security posture against rigorous customer specifications and regulatory frameworks (e.g., NIS2, IEC 62443). Secure Architecture & Integration: Oversee the secure design, hardening, and network segmentation of SCADA/EMS solutions deployed in customer environments. Ensure seamless integration of identity and access management (IAM), secure logging, and patch management workflows. Risk & Vulnerability Management: Apply our post-freeze risk scorecard methodologies. Evaluate 3rd-party software vulnerabilities using Environmental CVSS, reachability analysis (VEX), and exploit probability (EPSS/KEV) to advise Project Managers and Product Security Officers (PSSOs) on risk-based release decisions. Compliance & Certification Support: Drive adherence to IEC 62443-3-3 standards across project lifecycles, preparing documentation, security targets, and evidence for customer audits and factory/site acceptance tests (FAT/SAT). Incident Preparedness & Incident Engineering: Collaborate with project teams and incident response units to define fail-open contingency designs, ensuring grid availability takes precedence while containment and remediation occur safely.

Key Deliverables

Project Security Architecture & Risk Assessments: Comprehensive security design documents, threat models (STRIDE), and system-specific risk assessments for every assigned critical infrastructure project. Security-Gate Sign-offs: Authoritative security reviews and gate approvals at key project milestones (Architecture, FAT, SAT, Go-Live), backed by quantified risk-mitigation plans. Vulnerability & Patch Management Runbooks: Tailored operational guidelines and risk-scoring rationales for customers handling 3rd-party component patching in live SCADA environments. Regulatory & Audit Artifacts: Audit-ready compliance packages mapping project implementations to IEC 62443 and national critical infrastructure protection (CIP) standards.

What Success Looks Like

Zero Unmitigated Critical Exposures: High-risk vulnerabilities and architectural gaps are identified, triaged, and mitigated proactively before system integration or customer sign-off. Trusted Advisor Status: You earn the absolute confidence of customer CISOs and Bid- and Project Managers by explaining complex OT cybersecurity trade-offs with clarity, pragmatism, and authority. Resilient Delivery Without Compromise: Grid availability and performance are never sacrificed; your security frameworks ensure that fail-open mechanisms and robust risk management protect the grid while maintaining operational uptime. Seamless Collaboration: Engineering teams, PSSOs, and external partners view you not as a compliance bottleneck, but as an enabler who embeds security cleanly into the delivery lifecycle.

Qualifications

Degree in Computer Science, Information Security, Electrical Engineering, or equivalent practical experience. 5+ years of experience in cybersecurity within Industrial Control Systems (ICS), SCADA, or critical infrastructure sectors. Deep working knowledge of IEC 62443, NERC CIP, and European cybersecurity regulations (e.g., NIS2, CRA). Hands-on experience with threat modeling, secure network architectures (Purdue Model, firewalls, datadiodes), Identiy and Access Management concepts and vulnerability triaging tools. Excellent communication and stakeholder management skills in English #SL